case-battle[.]mobi

PhishDestroy identifies case-battle.mobi as an active crypto drainer impersonating a gaming battle platform. This domain was flagged on April 10, 2025, and currently resolves to IP 188.114.97.3. VirusTotal analysis shows 0 detections out of 95 engines, indicating it has evaded initial detection despite suspicious behavior. The domain utilizes a Let's Encrypt SSL certificate for legitimacy, while being registered through NameCheap, Inc., a common registrar for malicious domains. With no blocklist flags at this time, the risk remains under investigation, but the absence of detections does not guarantee safety. This domain poses a high-risk threat as a crypto drainer, designed to trick users into connecting cryptocurrency wallets under the guise of a gaming battle platform. Victims may unknowingly authorize malicious transactions that drain funds directly from their wallets. The domain’s recent creation and lack of detection suggest it is either new or employs evasion techniques to bypass security measures. Technical indicators, including the IP resolution and SSL certificate, are consistent with other crypto drainer operations observed in the wild. Users who have visited case-battle.mobi should immediately disconnect any connected wallets and revoke permissions via their wallet provider’s security settings. If transactions occurred, report the incident to local cybercrime units and monitor wallets for unauthorized activity. Avoid interacting with this domain or any linked pages, and verify suspicious links using PhishDestroy’s tools before proceeding. Early action can prevent irreversible financial losses.